$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json) Hash identifier: F3iJh2X5a1+GefnVQcKNyb+8BiQXgnwenW9A/RmqBZA= Subject key identifier: 46:AB:15:64:A8:0C:A3:BE:A5:28:7C:A9:BB:C1:C4:B8:CA:F3:DD:EC Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 0878 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft Manifest number: 0866 Signing time: Sun 26 Jul 2026 21:30:10 +0000 Manifest this update: Sun 26 Jul 2026 21:30:09 +0000 Manifest next update: Sun 02 Aug 2026 21:30:09 +0000 Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: 9XdHloH/q8YMkeSSs5O5nRzhuy1ieRCAoWNVviOLi6w=) 2: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: 4KpiEW9W9pRgd3+FQVTWJZ0pxE+Z+z9l6OeSvbZgOVU=) 3: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: YSshHnrBitWJflcXZv9vZjmuWryahdL3ueeQ/8L7cts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2168 (0x878) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Jul 26 21:30:09 2026 GMT Not After : Aug 2 21:30:09 2026 GMT Subject: CN=6a667c62-ff52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:88:31:5b:db:1e:16:c8:14:cd:23:c8:fb: e9:d4:d8:8b:b1:c4:d7:22:07:77:d1:4b:49:1f:9a: 5f:be:92:95:2b:bb:e8:f5:97:64:2a:d3:03:d4:37: e9:a5:16:56:9f:f4:2b:9d:04:6e:51:d2:8e:ce:01: ad:36:c6:b0:7c:39:7f:5d:5c:9e:8e:2a:56:1a:ef: ee:3b:a0:b9:5f:37:dc:8a:8c:0d:2c:6e:7c:77:df: 7e:e7:d7:60:9c:b0:2c:95:35:7e:2f:10:77:64:76: 79:63:be:82:8c:6e:16:22:6e:60:62:8d:6a:4f:06: 31:38:5d:a9:26:bf:23:58:b9:c0:73:e4:af:67:db: dd:7b:55:36:5d:d3:16:d0:c8:0c:3b:b2:03:cf:2c: 63:43:2a:a2:c3:b9:2e:bd:59:90:ea:cd:bc:0a:6b: e0:ce:cb:8c:67:af:71:c9:bb:22:e6:de:5e:53:76: 13:2e:a2:d3:e0:68:76:7c:e9:72:80:80:ad:2a:ba: 14:05:b8:0c:8a:31:6f:9f:84:86:58:f1:51:a0:06: e8:2c:21:ca:72:26:07:23:ca:99:c2:1f:f8:50:ab: 5c:47:b0:aa:eb:a7:4d:0e:77:a9:07:5d:1b:69:72: 99:cc:9a:ec:d9:e8:b4:91:54:32:bf:9a:69:2f:18: 05:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AB:15:64:A8:0C:A3:BE:A5:28:7C:A9:BB:C1:C4:B8:CA:F3:DD:EC X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:d1:2a:e2:7d:97:9c:b1:44:70:47:74:62:4c:bb:94:79:65: b9:e4:fa:bf:98:46:3a:d5:0a:38:27:2d:d0:13:8f:88:d1:91: 7e:f2:fb:68:f4:8f:d9:14:40:6a:ac:67:5e:8f:4f:68:f8:02: ea:fc:44:29:f5:1a:ed:74:69:c9:7a:72:34:ae:51:f3:0f:29: 1e:5f:2a:aa:78:a0:88:42:95:a8:da:2a:21:ea:96:65:14:8e: fa:99:92:c0:48:ff:07:fc:44:50:fb:9d:5b:d3:bc:d9:2f:12: f0:ea:50:83:b2:f1:2e:89:ad:9e:2f:5e:77:a5:82:e8:c3:7b: 2c:e2:a9:78:95:09:6b:86:07:38:bd:79:87:48:b8:bc:ab:34: ae:5a:87:6d:db:fd:2d:08:48:ad:61:9f:14:76:ab:33:07:b9: f3:c9:b7:33:d9:60:41:03:ff:3c:1a:a4:fc:39:47:94:2f:50: bd:f7:60:ef:12:58:a6:44:7e:1c:61:cd:e8:76:ad:17:17:f2: 17:12:fb:fc:8b:bd:b8:65:2b:52:7c:8d:8e:2e:94:6a:dd:06: 4c:ac:0a:f1:fe:31:49:4b:ad:f5:29:e3:8d:6a:4c:76:ef:45: aa:e2:ae:19:e1:7d:98:8b:4f:93:a3:ec:10:96:61:14:4b:77: 8f:77:66:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjYwNzI2MjEzMDA5WhcNMjYwODAyMjEzMDA5WjAYMRYwFAYD VQQDEw02YTY2N2M2Mi1mZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxo2IMVvbHhbIFM0jyPvp1NiLscTXIgd30UtJH5pfvpKVK7vo9ZdkKtMD1Dfp pRZWn/QrnQRuUdKOzgGtNsawfDl/XVyejipWGu/uO6C5XzfciowNLG58d99+59dg nLAslTV+LxB3ZHZ5Y76CjG4WIm5gYo1qTwYxOF2pJr8jWLnAc+SvZ9vde1U2XdMW 0MgMO7IDzyxjQyqiw7kuvVmQ6s28CmvgzsuMZ69xybsi5t5eU3YTLqLT4Gh2fOly gICtKroUBbgMijFvn4SGWPFRoAboLCHKciYHI8qZwh/4UKtcR7Cq66dNDnepB10b aXKZzJrs2ei0kVQyv5ppLxgFlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEarFWSo DKO+pSh8qbvBxLjK893sMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkUwOS8wMUE1ODM3QTBGNjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdj aW9EMkJIM0ZLWGVKUUVURDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAldEq4n2XnLFEcEd0Yky7lHllueT6v5hGOtUKOCct0BOPiNGRfvL7aPSP2RRA aqxnXo9PaPgC6vxEKfUa7XRpyXpyNK5R8w8pHl8qqnigiEKVqNoqIeqWZRSO+pmS wEj/B/xEUPudW9O82S8S8OpQg7LxLomtni9ed6WC6MN7LOKpeJUJa4YHOL15h0i4 vKs0rlqHbdv9LQhIrWGfFHarMwe588m3M9lgQQP/PBqk/DlHlC9Qvfdg7xJYpkR+ HGHN6HatFxfyFxL7/Iu9uGUrUnyNji6Uat0GTKwK8f4xSUut9SnjjWpMdu9FquKu GeF9mItPk6PsEJZhFEt3j3dmCQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:38:14 2026 by rpki-client